---
id: CVE-2026-95724
title: >-
  Unauthenticated Improper Certificate Validation leads to Authentication Bypass
  in HPE Networking Virtual Intranet Access (VIA)
summary: >-
  An improper certificate validation vulnerability exists in HPE Networking
  Virtual Intranet Access (VIA). Successful exploitation could allow an
  unauthenticated remote attacker to bypass authentication mechanisms, leading
  to the possible …
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N'
cvssSource: cna
vendor: Hewlett Packard Enterprise (HPE)
product: Virtual Intranet Access (VIA)
affected:
  - virtual_intranet_access_via >= 0.0.0 <= 4.7.8
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-11-06T19:46:32.928856Z'
published: '2026-11-03'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T19:46:50.480Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-95724'
references:
  - url: >-
      https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05173en_us&docLocale=en_US
tags:
  - cve.org
epss: 0.00279
epssPercentile: 0.20446
ingestedAt: '2026-11-05T20:33:06.427Z'
---

## Overview

An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA). Successful exploitation could allow an unauthenticated remote attacker to bypass authentication mechanisms, leading to the possible disclosure of sensitive information.

## Affected

- `virtual_intranet_access_via >= 0.0.0 <= 4.7.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.